Senior Application Security Engineer

Focused on enhancing application security, the full-time Senior Application Security Engineer will run and automate the vulnerability pipeline, identify and eliminate bug classes, and collaborate with engineering teams to implement secure practices in a remote environment. Key responsibilities Triage, validate, route, and drive remediation of findings from various sources, including SAST, DAST, and bug bounty programs Identify patterns in vulnerabilities and implement secure defaults and custom static analysis rules to prevent recurrence Conduct hands-on testing and threat modeling for applications and APIs, ensuring robust security practices across engineering teams Required qualifications Proven experience in end-to-end vulnerability management and automation using code against scanner, ticketing, and source-control APIs Strong engineering background with proficiency in coding languages such as Go, Python, Node.js, Ruby, or Java Deep understanding of the OWASP Top 10, particularly in broken access control and business logic flaws Experience with SAST, DAST, and SCA integration in CI/CD pipelines, alongside cloud fundamentals on GCP or AWS Ability to effectively communicate and influence across teams and time zones, demonstrating strong judgment in security matters